Environment: Windows 7 Workstations connected to Windows 2008 R2 domain controller. I'm wondering what things are considered by Windows when applying UAC elevation requirements to an application. I ask because I have an odd anomaly here. To keep it simple, say I have two workstations. Both connected to the DC, both logged in with users who are in the same security group, and thus both have the same GPOs/permissions applied to them. On machine 1, there is no UAC shield icon on the application in question. It runs without a UAC prompt. On machine 2, the IS a UAC shield icon on the application. And I have to provide admin credentials to run it. icacls shows identical permissions for the executable on both machines. No compatibility options have been set on either machine. Both of these machines were configured identically when they were built. The application is installed in the same location on both. What could be causing this? Forgive me in if this is a KB somewhere. I'm somewhat new to Windows administration. Regards.

Hi, I would like to say that UAC settings were create to improve the security level. When you enable the UAC, the user using the system is seem as the standard user even he has the administrator permission. As a result, if some application requires the administrator permission, a prompt window will show. This setting can prevent the malware software changing the important system settings without notifying you. For more information, you may refer to the following documents. http://technet.microsoft.com/en-us/library/cc709691(v=ws.10).aspx http://technet.microsoft.com/library/dd835564.aspx Kim Zhou TechNet Community Support

Hi, I would like to say that UAC settings were create to improve the security level. When you enable the UAC, the user using the system is seem as the standard user even he has the administrator permission. As a result, if some application requires the administrator permission, a prompt window will show. This setting can prevent the malware software changing the important system settings without notifying you. For more information, you may refer to the following documents. http://technet.microsoft.com/en-us/library/cc709691(v=ws.10).aspx http://technet.microsoft.com/library/dd835564.aspx Kim Zhou TechNet Community Support

To understand it better, You said both users are in the same security group? Are you sure the computers live in the same OU? I would check the UAC settings on both machines as you can have more or less retrictions set for machines. Usually the shield icon appears on a file which is flagged to require elevation to run or if it contains setup in the name. Is one of the users a Domain Admin?PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon